Privacy Policy

Effective Date: 9 May 2026

DesignToCodeAI (“we,” “our,” or “us”) is fully committed to keeping your design conversions and account data private and secure. This policy describes exactly what we collect, why, and how it’s handled in our system.

1. Information We Collect

Design uploads (PNG/JPG up to 20 MB): Processed in-memory for AI conversion, never written to disk. Auto-cleared on page refresh, session end, or after 24 hours.
Generated code output (HTML/CSS/JS, Elementor JSON): Available for preview/download, also processed in ephemeral memory only.
Account information: Includes email, hashed password, point balance, purchase history, plan level (Starter/Pro/Power).
Usage logs: IP, browser/device, timestamps, UI interactions—used solely to monitor system performance, prevent abuse, and support users.
Referral data: Tracks which users you’ve referred and any earned points.
Support messages: Emails or form submissions and any attachments you send us.
Website URLs and redesign inputs: Public website URLs, redesign prompts, and design references submitted for HTML generation, UI redesign, or Elementor JSON conversion are temporarily processed in-memory for AI-based output generation. We do not claim ownership of any submitted websites, designs, or branding assets.

2. Why We Collect It

Convert and deliver: Your uploaded images are transformed via AI into pixel-perfect code.
Manage billing/credits: We need your purchase history and point usage to debit or refund accurately.
Maintain and secure the platform: Usage logs help detect bots, keep services fast, and improve features.
Support and referral tracking: Recognize successful referrals, award points, and assist with requests.
Website-to-code, redesign, and template generation: Submitted website URLs and design references may be analyzed to generate HTML, CSS, JavaScript, redesign outputs, or Elementor-compatible JSON templates for development assistance.

3. Data Storage & Deletion

Designs & code: Processed in volatile memory only; permanently deleted after session ends or 24 hrs—whichever is first.
Account, usage, referral, support data: Retained while your account is active and for audit/tax purposes (typically up to 7 years).
Support discussions: Stored until resolved + 2 years.
Website URLs and related inputs: Any submitted URLs or redesign references used for generation are processed temporarily and automatically deleted within the same retention window as other session-based data.

If you delete your account, we will erase all personal data except legally required records (e.g., purchase receipts).

4. Cookies & Local Storage

We use essential cookies to handle authentication, session, and point balance updates.
Optional analytics cookies (e.g., truncated IP, device/browser info) may be set only if you opt in; these can be disabled in your browser.

5. Third-Party Services

We work with select, trusted providers, each bound by strict privacy agreements:

Payment partner: Handles purchase tokens; we never store card data.
Cloud server and AI API: Perform real-time design-to-code conversion; your files are encrypted in transit and memory-only.
(Optional) Analytics vendor: If enabled, we share only pseudonymized usage stats (e.g., truncated IP).
Website processing services: Includes handling of website URLs, redesign analysis, HTML generation, and Elementor JSON template creation. All processing is performed securely and temporarily for output generation only.

We never sell or rent personal data—only share what’s necessary to operate the service.

6. Security Controls

All traffic uses TLS encryption.
Sensitive backend data is encrypted at rest (AES-256).
Access is restricted via multi-factor authentication and role-based permissions.
We conduct regular security checks and apply patches promptly.

7. Refunds & Point Handling

Non-used points: Eligible for refund within 7 days if unused.
Failures: If a conversion fails technically, points are automatically refunded.
Subjective dissatisfaction: Users are encouraged to use iterations or contact support—points are not refunded for preference-based concerns.

8. Your Rights

You can easily:

Access or correct your account information or request a CSV of your personal data.
Delete your account and request removal of all personal data.
Opt-out of analytics tracking by disabling optional cookies or contacting us.
Dispute or limit processing—e.g., flag fraudulent logins or dubious point charges.

Requests can be made via privacy@designtocodeai.com. We respond within 30 days.

Legal responsibility for submitted content: Users are solely responsible for ensuring that any submitted website URLs, designs, branding materials, or other inputs are lawfully obtained and do not infringe on third-party intellectual property or applicable laws.

9. Children

Our services are for users 18 and older. If we learn a minor has used the service, we will immediately delete their data.

10. Updates to This Policy

We may update this Privacy Policy at any time. Changes take effect immediately upon posting on this page. For material updates, we may notify you via email or an on-site banner. Continued use of the Service after updates are posted constitutes acceptance of the revised Policy.

AI-generated outputs disclaimer: All generated outputs, including HTML, redesign suggestions, and Elementor JSON templates, are provided as automated assistance. Users are responsible for reviewing, validating, and ensuring suitability before using such outputs in production or commercial environments.

11. Contact Information

DesignToCodeAI
Email: privacy@designtocodeai.com
If you have questions or privacy concerns, drop us a line anytime—we’re here to help.